Filter state certificate mapper (proto)

This extension has the qualified name envoy.tls.upstream_certificate_mappers.filter_state_override

Note

This extension is functional but has not had substantial production burn time, use only with this caveat.

This extension has an unknown security posture and should only be used in deployments where both the downstream and upstream are trusted.

Tip

This extension extends and can be used with the following extension category:

• envoy.tls.upstream_certificate_mappers

This extension must be configured with one of the following type URLs:

• type.googleapis.com/envoy.extensions.transport_sockets.tls.cert_mappers.filter_state_override.v3.Config

extensions.transport_sockets.tls.cert_mappers.filter_state_override.v3.Config

[extensions.transport_sockets.tls.cert_mappers.filter_state_override.v3.Config proto]

Uses a filter state value for the key envoy.tls.certificate_mappers.on_demand_secret as the secret resource name. This filter state is expected to be shared from the downstream connection.

{
  "default_value": ...
}

default_value

(string, REQUIRED) The value to use as the secret name when the filter state is absent.